This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft File: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft (raw, json) Hash identifier: 2NPtcoOev8VZnE9nifeE/Um4FrkgS8kMv3MvmTp2q/Y= Subject key identifier: 0D:E6:88:96:AF:70:77:5E:CE:EC:5E:A8:30:3D:97:93:E6:8B:76:C8 Authority key identifier: E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 Certificate issuer: /CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Certificate serial: 46D6EA071A20F0D863F26DC7C3838DFEB53D395E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft Manifest number: CC Signing time: Mon 01 Dec 2025 22:31:56 +0000 Manifest this update: Mon 01 Dec 2025 22:26:56 +0000 Manifest next update: Fri 05 Dec 2025 06:04:56 +0000 Files and hashes: 1: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl (hash: G0jfhr6a55v0gKXhGLcl4uLyk/DDU2ilkc84KfgWPU8=) 2: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: S22ChZGEvJ5gAYFztY/TYC839FBrS83Y5ZysrOVb4ss=) 3: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: jU/SQlHFg0i0t2XT427YG+4xTKw9TASNvTEDlba6svA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d6:ea:07:1a:20:f0:d8:63:f2:6d:c7:c3:83:8d:fe:b5:3d:39:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Validity Not Before: Dec 1 22:26:56 2025 GMT Not After : Dec 5 06:04:56 2025 GMT Subject: CN=0DE68896AF70775ECEEC5EA8303D9793E68B76C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:bb:1f:cc:d9:40:f3:4d:8c:6a:64:5e:ed: 7d:d6:62:2a:f0:e2:7c:f2:77:b0:22:39:1d:51:e5: e8:54:6d:ac:66:7b:a7:9e:3a:e0:25:9b:61:23:c0: e3:58:c2:7b:19:ff:6a:04:ba:9a:5a:08:93:1a:da: 3d:fc:c1:89:a9:6e:ae:79:b1:6a:a6:4f:d2:24:38: 61:88:70:08:38:c3:2a:3a:63:63:07:0c:bb:45:4c: 47:5d:5c:6e:d0:d8:9c:ab:6c:66:31:ec:3f:d6:61: fa:6f:b5:38:e7:11:24:c0:71:dd:af:81:21:00:5e: 57:5b:50:b9:bd:ec:f5:20:ad:39:82:1e:6e:1a:b6: 06:69:dc:ec:82:85:5d:98:5b:bf:6c:80:a4:08:0f: 29:8b:ae:d9:7c:5c:69:05:f9:75:0b:a9:14:8e:4f: ec:a4:d8:92:ea:26:cc:92:86:eb:dc:15:d9:06:4b: 6b:4d:be:1a:47:5a:2e:62:d6:38:ec:75:3d:39:95: ee:51:00:e8:69:b4:5c:87:44:1f:fb:35:ee:cb:88: 7f:7b:56:e0:01:0a:e1:79:16:2f:ed:79:64:8d:74: 51:db:d1:4d:21:16:b3:6a:6b:4c:7b:e2:e8:eb:e8: f0:9e:7b:20:47:c6:5a:6b:b7:c3:91:6e:f0:d9:d1: ab:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E6:88:96:AF:70:77:5E:CE:EC:5E:A8:30:3D:97:93:E6:8B:76:C8 X509v3 Authority Key Identifier: keyid:E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:64:7d:ce:de:43:8c:42:df:47:53:83:17:7a:0f:5d:0d:e2: c6:43:95:ec:11:55:6c:5c:4c:51:27:ea:ab:c0:e5:09:9b:1d: ef:d8:89:e4:96:b2:2b:5e:70:d8:7d:71:19:f5:60:18:8e:b7: e3:43:c1:a4:64:8b:07:85:be:1b:b9:2c:a4:58:6a:e8:76:37: 88:79:22:26:c7:8b:55:90:05:16:f4:41:ed:39:da:84:b0:ee: bb:76:c6:de:5e:c3:5c:04:79:d9:d9:ed:be:1a:9b:a9:76:2d: f2:34:69:fd:96:28:9a:2f:dc:15:5a:ef:84:f4:12:e8:88:cb: 4f:8d:2b:81:0c:34:7f:aa:a9:4c:47:2e:39:3e:02:be:68:7e: 2a:a0:dc:62:2f:68:41:7c:7e:23:d7:88:8a:2e:e7:64:19:e8: 13:0c:43:2e:63:0d:23:fb:51:bb:b6:75:a6:1b:f9:1b:e7:ad: ee:35:23:f6:f2:ae:c7:b0:5d:1b:fb:6a:db:b4:6a:c7:c1:12: 26:cc:10:47:47:ed:a4:05:17:38:a4:d3:93:79:45:da:5f:c2: 45:99:f5:8c:a8:ed:30:f9:3a:a3:a5:cf:b7:a3:9b:35:7b:be: 34:eb:b6:31:49:f5:75:7c:7c:94:17:98:e1:84:c5:38:d9:1d: c8:75:e4:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURtbqBxog8Nhj8m3Hw4ON/rU9OV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJD MzZDRUU2NTAeFw0yNTEyMDEyMjI2NTZaFw0yNTEyMDUwNjA0NTZaMDMxMTAvBgNV BAMTKDBERTY4ODk2QUY3MDc3NUVDRUVDNUVBODMwM0Q5NzkzRTY4Qjc2QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB9rsfzNlA802MamRe7X3WYirw 4nzyd7AiOR1R5ehUbaxme6eeOuAlm2EjwONYwnsZ/2oEuppaCJMa2j38wYmpbq55 sWqmT9IkOGGIcAg4wyo6Y2MHDLtFTEddXG7Q2JyrbGYx7D/WYfpvtTjnESTAcd2v gSEAXldbULm97PUgrTmCHm4atgZp3OyChV2YW79sgKQIDymLrtl8XGkF+XULqRSO T+yk2JLqJsyShuvcFdkGS2tNvhpHWi5i1jjsdT05le5RAOhptFyHRB/7Ne7LiH97 VuABCuF5Fi/teWSNdFHb0U0hFrNqa0x74ujr6PCeeyBHxlprt8ORbvDZ0atlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDeaIlq9wd17O7F6oMD2Xk+aLdsgwHwYDVR0j BBgwFoAU5IWKJhVHqsBlzflsIfiposNs7mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI4YWFjMy0wMDk0LTQyMWYtYTIwMS0yNGQ4MjBlMmFiM2QvMC9FNDg1OEEyNjE1 NDdBQUMwNjVDREY5NkMyMUY4QTlBMkMzNkNFRTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJDMzZD RUU2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOGFhYzMtMDA5NC00MjFmLWEy MDEtMjRkODIwZTJhYjNkLzAvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5 QTJDMzZDRUU2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRkfc7eQ4xC30dTgxd6D10N4sZDlewRVWxc TFEn6qvA5QmbHe/YieSWsitecNh9cRn1YBiOt+NDwaRkiweFvhu5LKRYauh2N4h5 IibHi1WQBRb0Qe052oSw7rt2xt5ew1wEednZ7b4am6l2LfI0af2WKJov3BVa74T0 EuiIy0+NK4EMNH+qqUxHLjk+Ar5ofiqg3GIvaEF8fiPXiIou52QZ6BMMQy5jDSP7 Ubu2daYb+Rvnre41I/byrsewXRv7atu0asfBEibMEEdH7aQFFzik05N5RdpfwkWZ 9Yyo7TD5OqOlz7ejmzV7vjTrtjFJ9XV8fJQXmOGExTjZHch15Ew= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:29 2025 by rpki-client